Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/aK768-Kh2-pg6_61ZFnmkbnQg7E.roa
File: aK768-Kh2-pg6_61ZFnmkbnQg7E.roa (raw, json)
Hash identifier: H/4vXHCrR5NyFfyXG+BW9ycwpW8r3zMiwgmkbzMsmBQ=
Subject key identifier: 68:AE:FA:F3:E2:A1:DB:EA:60:EB:FE:B5:64:59:E6:91:B9:D0:83:B1
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 019970242F86CD07510B3EB2A0F99DDCA398
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/aK768-Kh2-pg6_61ZFnmkbnQg7E.roa
Signing time: Mon 22 Sep 2025 06:37:23 +0000
ROA not before: Mon 22 Sep 2025 06:37:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24627
IP address blocks: 194.126.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:24:2f:86:cd:07:51:0b:3e:b2:a0:f9:9d:dc:a3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Sep 22 06:37:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68aefaf3e2a1dbea60ebfeb56459e691b9d083b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:a6:74:f1:e9:d5:ac:0b:32:58:7c:c0:3b:
5a:df:c6:8a:38:28:82:b5:12:fb:f6:12:85:4f:59:
f4:8f:a7:6c:ff:82:ff:5e:0c:91:33:88:df:b7:70:
7c:51:61:1f:da:0d:ff:75:20:69:28:0e:85:f5:fc:
1b:07:68:4f:39:8d:96:8b:6f:7c:33:34:00:04:9f:
82:4b:a3:8c:51:d0:60:d5:e5:9d:e7:da:14:a9:6a:
1c:33:38:97:b9:f7:e8:32:97:24:23:a8:c4:5a:53:
15:a9:29:e9:be:47:84:0d:c3:71:01:1e:f8:cc:53:
c7:5f:2f:ca:88:1f:81:b0:14:cc:62:a4:e7:6e:f4:
04:81:21:fe:b0:54:20:80:06:8a:fb:96:97:f8:7a:
89:0b:fc:44:f5:50:01:3e:e9:3f:c7:5f:ce:04:55:
1d:28:53:33:2e:bd:45:51:08:5e:c5:8d:8e:76:92:
a2:00:d1:9d:e1:0c:08:96:0e:be:5d:0c:07:4b:c4:
5d:c9:5b:c2:37:dd:cb:65:86:b1:b6:ef:55:37:50:
f4:d8:c8:73:fe:d2:d4:74:8f:ae:f8:c8:b2:26:09:
01:d4:fd:5a:ad:c1:b5:77:5d:67:f1:e6:c2:90:65:
1c:5c:5d:58:f4:2f:f6:0e:ce:b4:67:b1:40:4f:d2:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:FA:F3:E2:A1:DB:EA:60:EB:FE:B5:64:59:E6:91:B9:D0:83:B1
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/aK768-Kh2-pg6_61ZFnmkbnQg7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.44.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1f:7b:7c:bb:40:74:0a:af:2b:c8:36:b8:af:c6:5d:e0:93:
72:6f:98:9a:55:bf:43:53:a6:05:a5:fc:4f:f0:c0:31:f7:54:
f1:e6:49:80:b7:03:27:f4:d6:37:21:c8:6e:65:b2:99:99:a6:
33:ff:9d:93:51:3e:69:9e:27:35:ef:0d:9c:73:ce:37:4a:68:
f7:c3:1b:71:ac:9f:fd:e8:8b:ed:2d:3f:94:9a:a8:0c:4e:f8:
b5:9d:10:09:2a:e2:c1:4d:10:be:41:56:7f:f0:78:32:2d:24:
71:29:e9:e3:64:f0:ab:37:1f:b8:65:21:cc:ad:22:42:a5:55:
df:60:e7:fa:0b:b3:9c:0b:88:34:1a:e3:08:1e:0b:78:89:7b:
12:c5:d4:90:16:51:ed:be:2c:79:23:07:88:2b:15:be:84:fe:
70:61:76:c0:cf:81:6e:4b:45:15:42:d7:0e:6c:95:d2:94:8f:
60:ea:91:d8:64:1f:7f:e1:28:75:9a:0f:11:aa:d2:6f:f7:6f:
40:33:8a:5e:ac:fa:a9:ac:9e:6f:42:55:a9:b2:d2:31:81:10:
ea:ec:c9:1b:cb:03:ac:ea:23:d3:60:0b:6b:29:87:29:dc:e9:
c6:0d:d5:dd:96:77:46:86:9e:e0:69:34:6f:2b:d7:4d:e2:77:
6e:3d:ad:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlwJC+GzQdRCz6yoPmd3KOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTQxNWVkNWMwYzc3NTk5ODEwMDFiOGRiMjYyZGE3Nzlh
MDRiM2QwHhcNMjUwOTIyMDYzNzIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGFlZmFmM2UyYTFkYmVhNjBlYmZlYjU2NDU5ZTY5MWI5ZDA4M2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a2mdPHp1awLMlh8wDta38aKOCiC
tRL79hKFT1n0j6ds/4L/XgyRM4jft3B8UWEf2g3/dSBpKA6F9fwbB2hPOY2Wi298
MzQABJ+CS6OMUdBg1eWd59oUqWocMziXuffoMpckI6jEWlMVqSnpvkeEDcNxAR74
zFPHXy/KiB+BsBTMYqTnbvQEgSH+sFQggAaK+5aX+HqJC/xE9VABPuk/x1/OBFUd
KFMzLr1FUQhexY2OdpKiANGd4QwIlg6+XQwHS8RdyVvCN93LZYaxtu9VN1D02Mhz
/tLUdI+u+MiyJgkB1P1arcG1d11n8ebCkGUcXF1Y9C/2Ds60Z7FAT9K3sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGiu+vPiodvqYOv+tWRZ5pG50IOxMB8GA1UdIwQY
MBaAFOnkFe1cDHdZmBABuNsmLad5oEs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDkt
MjhkYTZhMWJhMTI4LzEvYUs3NjgtS2gyLXBnNl82MVpGbm1rYm5RZzdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDktMjhkYTZhMWJhMTI4
LzEvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn4sMA0G
CSqGSIb3DQEBCwUAA4IBAQCZH3t8u0B0Cq8ryDa4r8Zd4JNyb5iaVb9DU6YFpfxP
8MAx91Tx5kmAtwMn9NY3IchuZbKZmaYz/52TUT5pnic17w2cc843Smj3wxtxrJ/9
6IvtLT+UmqgMTvi1nRAJKuLBTRC+QVZ/8HgyLSRxKenjZPCrNx+4ZSHMrSJCpVXf
YOf6C7OcC4g0GuMIHgt4iXsSxdSQFlHtvix5IweIKxW+hP5wYXbAz4FuS0UVQtcO
bJXSlI9g6pHYZB9/4Sh1mg8RqtJv929AM4perPqprJ5vQlWpstIxgRDq7MkbywOs
6iPTYAtrKYcp3OnGDdXdlndGhp7gaTRvK9dN4nduPa0t
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:16 2025 by rpki-client